Android/Trojan.FakeFortnite

ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.

Short bio

Android/Trojan.FakeFortnite is Malwarebytes’ detection name for a clickbait trojan for the Android platform that poses as the installer for a popular game called Fortnite, that had not yet been released when the trojan was promoted in search results and on YouTube.

Type of infection

The actual game Fortnite never was included in the installer. It just takes the user on a tour that brings in revenue for the threat-actors.

The apps are not located on the Google Play Store. Instead, people have found them by searching “How to install Fortnite on Android” or “Fortnite for Android” in Google, or stumbling across links in YouTube ads. From there, the apps can be downloaded.

Malicious behavior

Fake loading screen and see this icon:

fake Fortnite icon

Protection

Malwarebytes for Android detects the apps as Android/Trojan.FakeFortnite.

Home remediation

Malwarebytes for Android can help by identifying these apps and remove.